Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          EQLwTRX2i+P4Ra0IfAVG60a/ax7/jXT0upVzqiKwccg=
Subject key identifier:   95:EE:01:08:F5:24:CA:48:94:DC:36:29:77:E6:36:68:76:12:A8:D1
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       019CAB34A8C70BCF0A62A41243AA12363203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          142F
Signing time:             Sun 01 Mar 2026 21:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:20 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:20 +0000
Files and hashes:         1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
                          2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: vehH7XX+gcZ46FAyl9aOMinjhHfpWNrDC7mKwhD7nyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:a8:c7:0b:cf:0a:62:a4:12:43:aa:12:36:32:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Mar  1 21:01:20 2026 GMT
            Not After : Mar  2 21:01:20 2026 GMT
        Subject: CN=95ee0108f524ca4894dc362977e636687612a8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:3e:8f:6c:af:4d:8c:36:cb:98:93:07:74:
                    9b:4c:0c:fb:a1:f9:b9:ef:2d:35:66:ae:07:c2:ef:
                    08:75:09:c7:ec:d9:7d:8e:6e:97:bc:0f:be:4a:48:
                    89:74:57:7c:f3:3f:48:0e:44:5f:c5:c3:f9:b7:46:
                    c5:93:ba:22:bc:26:57:e0:21:98:e2:ef:ec:9a:eb:
                    3e:a1:67:25:27:4e:11:85:1d:af:a4:b2:dd:13:65:
                    16:77:2c:eb:6c:61:1e:77:84:6f:be:2c:3a:89:bf:
                    03:10:e4:9c:68:80:9a:28:2a:27:64:e8:87:b0:c2:
                    58:17:12:26:61:c7:65:24:e0:ce:c6:d0:71:ab:9c:
                    2e:f4:ac:8a:ef:27:ae:ed:6c:86:4a:b6:d6:c0:1a:
                    8a:72:1d:80:21:7a:39:40:90:1f:26:bc:55:4a:58:
                    95:8f:c7:dd:18:b8:be:3e:6e:d2:7d:0c:35:ea:90:
                    65:81:f9:c1:d9:a7:89:75:3d:35:dc:57:e0:1d:03:
                    95:3b:5b:54:d9:a3:f9:78:82:c7:f3:2f:60:10:4a:
                    5b:1b:20:c4:7e:ee:ff:6b:e6:21:e3:6a:c4:c6:46:
                    dc:b9:64:07:64:da:52:5f:b6:e4:20:6b:9c:fc:4b:
                    2a:df:28:12:86:5a:5e:33:7c:47:4e:22:f6:2c:7e:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EE:01:08:F5:24:CA:48:94:DC:36:29:77:E6:36:68:76:12:A8:D1
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:e6:7e:53:c5:46:1d:bc:4f:66:e9:86:91:6a:63:f2:2f:
         4e:ef:ea:31:7d:45:30:13:25:ab:56:c3:29:72:a8:18:61:37:
         1b:ac:53:78:5a:92:cf:b9:cb:a3:e6:8c:22:75:82:44:ff:59:
         cf:d9:5a:03:95:4b:f5:e3:2e:79:e0:7d:5e:e6:e6:9e:56:45:
         5e:69:9e:41:72:22:24:cb:b6:7b:cb:f7:b2:36:24:ec:29:1f:
         ad:69:53:ec:bc:2b:c3:22:48:97:e3:18:7b:48:65:c8:d1:bd:
         ce:e5:3f:13:79:85:37:e4:1b:31:0b:63:c2:49:4c:1a:22:d9:
         58:63:eb:00:c1:c4:70:49:e8:69:fa:f8:11:88:7c:9a:8d:33:
         81:6e:ad:26:33:f1:fb:9a:d5:14:29:e1:8f:d6:44:d8:6e:74:
         40:74:a0:b5:80:b7:8d:61:0b:f3:de:ca:c2:61:d5:7b:13:a9:
         76:db:11:00:6d:65:f6:b8:e8:e6:7a:e9:a3:0d:aa:19:8c:63:
         d4:b5:68:46:29:70:c5:65:4b:ae:72:ba:46:3c:f8:01:31:be:
         fe:06:5b:a3:22:de:f1:1e:f2:73:a0:41:2c:78:b2:3b:27:67:
         49:1c:83:51:5f:e3:81:5a:b1:ce:90:2c:af:e0:93:6b:da:91:
         80:5e:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:31:30 2026 by rpki-client